HackingGovernmentGovernmentDelayed DiscoveryIdentity (basic)Government IDMediumContained

Dallas County, Texas

bd_07372230281d0837 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 19, 2023

Filed

Jul 10, 2024

To disclose

38 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

65%

Dallas County, Texas notified consumers of a cybersecurity incident discovered on October 19, 2023. The breach potentially exposed names and Social Security Numbers or Tax Identification Numbers. The County engaged forensic investigators, deployed EDR tools, forced password resets, and blocked malicious traffic. Affected individuals were offered 24 months of identity protection services through IDX.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday38 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 38 weeks / 265 days

Oct 19, 2023

Discovered

Jul 10, 2024

Filed

This filing is one of 4 about the same incident.View merged incident

A leak claim by play about this victim predates this filing by 265 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_1b62d05ca632c2de2023-10-19 · +265dVerified by operator

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_5699888e7c7a051a2024-07-15 · +5dVerified
Massachusetts State AGbd_75d364f0d461aed92024-07-15 · +5dVerified by operator

Name: Dallas County, Texas
norm: dallas county

Name: Dallas County, Texas
norm: dallas county
Industry: Governmentllm

Discovered: Oct 19, 2023
Materiality determined: —
Notification sent: Jul 10, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Engaged third-party cybersecurity specialists to perform a comprehensive investigation
Established a dedicated call center for individuals to call
Initiated measures to secure its information
Deployed an Endpoint Detection and Response (EDR) tool across servers and endpoints
Forced password changes for all users
Blocked ingress and egress traffic to IP addresses identified as malicious
Engaged external cybersecurity experts to investigate the nature and scope of the incident
Changes made: Arranged for IDX, a third-party vendor, to provide individuals whose Social Security Number or Tax Identification Number may have been impacted with 24 months of complimentary identity protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 38 weeks(265 days from discovery to filing)
Compliance flags: VT AG >45 bdayLeak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Vermont State AGJul 10 · first · this page

New Hampshire State AG+5d

Massachusetts State AG+5d

Pattern: first filing Jul 10 (VT), last Jul 15 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-07-10-dallas-county-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 10, 2024
Raw hash: f3b282d0a4563aafa5e5141132622946f2197651a4a25b47846337d5c92bc049

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityDallas County, Texas

Victim entityDallas County, Texas

Incidentdiscovered Oct 19, 2023

Stated responseEngaged third-party cybersecurity specialists to perform a comprehensive investigation

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov